91636e8b85
Previously the VMWare Datastore was using HTTPS Connections from httplib which do not verify the connection. Switching to requests allows the store to perform proper connection level verification for a secure connection. By switching to using requests, we will get several benefits: 1. Certificate verification when using HTTPS 2. Connection pooling when following redirects 3. Help handling redirects 4. Help with Chunked Encoding Partial-bug: 1436082 Co-authored-by: Sabari Kumar Murugesan <smurugesan@vmware.com> Change-Id: I8ff20b2f6bd0e05cd50e44a60ec89fd54f87e1b4
7 lines
316 B
YAML
7 lines
316 B
YAML
---
|
|
security:
|
|
- Previously the VMWare Datastore was using HTTPS Connections from httplib
|
|
which do not verify the connection. By switching to using requests library
|
|
the VMware storage backend now verifies HTTPS connection to vCenter server
|
|
and thus addresses the vulnerabilities described in OSSN-0033.
|